diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 14f8094..b6a7dc0 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -224,7 +224,7 @@ jobs:
           path: sbom-out
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64  # v3
+        uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3  # v3
         with:
           # `generate_release_notes` stays OFF, deliberately — do not restore it. The action
           # appends the WHOLE generated block (`<body>\n\n<notes>`), which would put the